subject

Match each phase of the cyber kill chain with its correct definition 1. Coupling a remote access trojan with an exploit into a deliverable payload, typically by means of an automated tool (weaponizer). Increasingly, client application data files suchas Adobe Portable Document Format (PDF) or Microsoft Office documents serve as the weaponizeddeliverable.
2. Transmission of the weapon to the targeted environment. The three most prevalentdelivery vectors for weaponized payloads by APT actors, as observed by the Lockheed MartinComputer Incident Response Team (LM-CIRT) for the years 2004-2010, are email attachments, websites, and USB removable media.

3. After the weapon is delivered to victim host, exploitation triggers intruders’ code. Most often, exploitation targets an application or operating system vulnerability, but it could alsomore simply exploit the users themselves or leverage an operating system feature that auto-executescode.

4. Installation of a remote access trojan or backdoor on the victim system allows theadversary to maintain persistence inside the environment.
5. Typically, compromised hosts must beacon outbound to anInternet controller server to establish a C2 channel. APT malware especially requires manualinteraction rather than conduct activity automatically. Once the C2 channel establishes, intrudershave "hands on the keyboard" access inside the target environment.

6. Only now, after progressing through the first six phases, can intruderstake actions to achieve their original objectives. Typically, this objective is data exfiltration whichinvolves collecting, encrypting and extracting information from the victim environment; violationsof data integrity or availability are potential objectives as well. Alternatively, the intruders mayonly desire access to the initial victim box for use as a hop point to compromise additional systemsand move laterally inside the network.

a. Weaponization
b. Delivery
c. Exploitation
d. Installation
e. Command and Control (C2)
f. Actions on Objectives

ansver
Answers: 2

Another question on Computers and Technology

question
Computers and Technology, 22.06.2019 12:40
How do i get the most points, without any effort?
Answers: 2
question
Computers and Technology, 22.06.2019 23:00
In which part of a professional email should you try to be brief, but highly descriptive?
Answers: 1
question
Computers and Technology, 24.06.2019 12:30
Why does the pc send out a broadcast arp prior to sending the first ping request
Answers: 1
question
Computers and Technology, 24.06.2019 16:30
What is the item which could be matched with a statement below? software installed on a computer that produces pop-up ads using your browser an example of social engineering malware loads itself before the os boot is complete type of spyware that tracks your keystrokes, including passwords windows key + l the practice of tricking people into giving out private information or allowing unsafe programs into the network or computer when someone who is unauthorized follows the employee through a secured entrance to a room or building a type of malware that tricks you into opening it by substituting itself for a legitimate program a computer that has been hacked, and the hacker is using the computer to run repetitive software in the background without the user's knowledge an infestation designed to copy itself repeatedly to memory, on drive space, or on a network
Answers: 1
You know the right answer?
Match each phase of the cyber kill chain with its correct definition 1. Coupling a remote access tr...
Questions
question
Chemistry, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
question
Mathematics, 20.10.2020 22:01
Questions on the website: 13722360